如何關閉WCF服務客戶端的證書吊銷？

Question

如何關閉WCF服務客戶端的證書吊銷？ 客戶端代理由wsdl.exe生成並繼承SoapHttpClientProtocol。

Answer 1

我認爲你正在尋找ServicePointManager.ServerCertificateValidationCallback：

http://msdn.microsoft.com/en-gb/library/system.net.servicepointmanager.servercertificatevalidationcallback.aspx

，這需要RemoteCertificateValidationCallback代表：

http://msdn.microsoft.com/en-gb/library/system.net.security.remotecertificatevalidationcallback.aspx

我從來沒有處理（我有手來處理其他問題，如到期的SSL的）之前吊銷的證書，但我猜你只是這樣做：

class Program 
{ 
    static void Main(string[] args) 
    { 
     ServicePointManager.ServerCertificateValidationCallback += 
      new RemoteCertificateValidationCallback(ValidateCertificate); 

     // Do WCF calls... 
    } 

    public static bool ValidateCertificate(object sender, X509Certificate cert, 
           X509Chain chain, SslPolicyErrors sslPolicyErrors) 
    { 
     if(sslPolicyErrors == SslPolicyErrors.RemoteCertificateChainErrors) 
     { 
      foreach(X509ChainStatus chainStatus in chain.ChainStatus) 
      { 
       if(chainStatus.Status == X509ChainStatusFlags.Revoked) 
       { 
        return true; 
       } 
      } 
     } 

     return false; 
    } 
} 

Answer 2

您可以設置證書驗證在您的應用程序配置文件撤銷選項：

http://www.request-response.com/blog/PermaLink,guid,e9bb929b-d0b4-4626-b302-1d2715fc344a.aspx